Source: https://mindstamp.com/help/soc-2-and-iso-27001
Generated from the Help Center records: 2026-10-06

# Is Mindstamp SOC 2 or ISO 27001 certified?

Topic: [Security and privacy](https://mindstamp.com/help/security) · Updated: 2026-09-25

## Short answer

No. Mindstamp does not hold a SOC 2 report or an ISO 27001 certification. Mindstamp provides a security statement on request, and Enterprise buyers can bring their security questionnaire and vendor requirements to a scoped review.

## Steps

1. Read the published legal documents: the Privacy Policy, Terms of Service, Disclaimer, and Cookie Declaration and Network Calls.
2. To ask for the security statement, [contact the team](https://mindstamp.com/contact).
3. If your company needs a questionnaire, vendor onboarding or contract terms, start with the [Enterprise page](https://mindstamp.com/enterprise) and bring your requirements to the first call.

## What is published

- All legal documents are listed on the [legal resources page](https://mindstamp.com/legal/all).
- The [Privacy Policy](https://mindstamp.com/legal/privacy-policy) explains what personal data Mindstamp collects, how it is used, your GDPR rights, and how data is transferred out of the European Union.
- The [Cookie Declaration and Network Calls](https://mindstamp.com/legal/cookie-declaration-network-calls) page covers cookies in the viewer experience.

## Security facts you can use today

- Team members sign in with an email and password, or with Google.
- Payment card details are handled by a third-party billing service.
- AI features stay off until an account owner turns them on. Actions by connected AI agents are scoped, audited and reversible.
- API tokens are scoped and can be revoked.

## If your policy requires SOC 2

Some procurement policies accept a vendor security statement, a questionnaire and contract terms in place of a SOC 2 report. Ask your security team if an exception process exists, then send your requirements through the [Enterprise page](https://mindstamp.com/enterprise). The quote and contract state what Mindstamp can support.

## Go further

- [Enterprise](https://mindstamp.com/enterprise)
- [Contact the team](https://mindstamp.com/contact)

## Related answers

- [Do you complete security reviews and legal documents?](https://mindstamp.com/help/security-review)
- [Does Mindstamp support GDPR requirements?](https://mindstamp.com/help/gdpr)
- [Where is Mindstamp data stored?](https://mindstamp.com/help/where-is-mindstamp-data-stored)

---

Need more help? [Contact Mindstamp](https://mindstamp.com/contact) · [Help Center](https://mindstamp.com/help) · [All Help Center articles as JSON](https://mindstamp.com/help-feed/index.json)